CVE-2006-3960

SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

• CWE-89

• http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0720.html
• http://downloads.securityfocus.com/vulnerabilities/exploits/x-poll_poc.txtExploit
• http://secunia.com/advisories/21283Vendor Advisory
• http://www.osvdb.org/27634
• http://www.securityfocus.com/bid/19236Exploit
• http://www.vupen.com/english/advisories/2006/3070Vendor Advisory
• http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0720.html
• http://downloads.securityfocus.com/vulnerabilities/exploits/x-poll_poc.txtExploit
• http://secunia.com/advisories/21283Vendor Advisory
• http://www.osvdb.org/27634
• http://www.securityfocus.com/bid/19236Exploit
• http://www.vupen.com/english/advisories/2006/3070Vendor Advisory

Published

Aug 1, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-3954Directory traversal vulnerability in usercp.php in MyBB (aka…
• CVE-2006-3955Multiple PHP remote file inclusion vulnerabilities in MiniBB…
• CVE-2006-3956Multiple cross-site scripting (XSS) vulnerabilities in conta…
• CVE-2006-3957PHP remote file inclusion vulnerability in payment.php in Bo…
• CVE-2006-3958Multiple unspecified cross-site scripting (XSS) vulnerabilit…
• CVE-2006-3959SQL injection vulnerability in protect.php in X-Scripts X-Pr…
• CVE-2006-3961Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) i…
• CVE-2006-3962PHP remote file inclusion vulnerability in administrator/com…
• CVE-2006-3963Multiple SQL injection vulnerabilities in Banex PHP MySQL Ba…
• CVE-2006-3964PHP remote file inclusion vulnerability in members.php in Ba…
• CVE-2006-3965Banex PHP MySQL Banner Exchange 2.21 stores lib.inc under th…
• CVE-2006-3966PHP remote file inclusion vulnerability in /lib/tree/layersm…